The importance of human mobility analyses is growing in both research and practice, especially as applications for urban planning and mobility rely on them. Aggregate statistics and visualizations play an essential role as building blocks of data explorations and summary reports, the latter being increasingly released to third parties such as municipal administrations or in the context of citizen participation. However, such explorations already pose a threat to privacy as they reveal potentially sensitive location information, and thus should not be shared without further privacy measures. There is a substantial gap between state-of-the-art research on privacy methods and their utilization in practice. We thus conceptualize a standardized mobility report with differential privacy guarantees and implement it as open-source software to enable a privacy-preserving exploration of key aspects of mobility data in an easily accessible way. Moreover, we evaluate the benefits of limiting user contributions using three data sets relevant to research and practice. Our results show that even a strong limit on user contribution alters the original geospatial distribution only within a comparatively small range, while significantly reducing the error introduced by adding noise to achieve privacy guarantees.
翻译:综合统计和可视化作为数据探索和简要报告的组成部分,发挥着不可或缺的作用,后者日益向第三方,如市政府或公民参与方面发布,然而,这种探索已经对隐私构成威胁,因为它们揭示了潜在的敏感地点信息,因此不应在没有进一步隐私措施的情况下分享这些信息。关于隐私方法的先进研究与实际利用之间存在巨大差距。因此,我们构想了带有不同隐私保障的标准化流动报告,将其作为开放源软件,以便能够以易于获取的方式对流动数据的关键方面进行保密探索。此外,我们评估使用与研究和实践有关的三个数据集限制用户贡献的好处。我们的结果显示,即使对用户贡献的严格限制也只在相对较小的范围内改变最初的地理空间分布,同时通过增加噪音实现隐私保障而大大减少错误。